Privacy policy

BonPlaya (the operator of bonplaya.com) is the controller for personal data processed through this website. For privacy questions use info@bonplaya.com or the contact page on this site.

The plugin runs on the WordPress site of the person who installs it, not in the browsers of that site's visitors. Visitors of that WordPress site do not send data to BonPlaya from their browser.

The WordPress server may send read-only HTTP GET requests to https://bonplaya.com/sitemap.xml (and nested sitemap files) to match public beach URLs for optional review links.

This happens after a plugin update, or when the local sitemap cache has expired. Not otherwise. Not on every page view. Not from the visitor's browser.

Those requests do not include names, e-mail addresses or cookies of visitors of that WordPress site. They do include a User-Agent "BonPlayaNearbyBeaches/0.1" plus the home_url of that WordPress installation (identifies the site, not an end user).

The plugin can optionally show visible HTML links to bonplaya.com (integration full, subtle or none). That is not an API call from the visitor. If the site admin sets integration to none, there are no BonPlaya.com links.

The plugin does not set tracking, analytics or advertising cookies on behalf of BonPlaya.

When you browse this website, our hosting and application logs typically store the IP address, User-Agent, requested URL and time. That is normal for a public site. We use it for security, abuse prevention and debugging, not for advertising.

If you register or sign in we store your e-mail address and optional name, plus a login cookie. If you sign in with Google we receive your e-mail (and a display name if Google provides one) to create or link your account.

Reviews and photos you publish are stored and shown publicly as part of the guide. You can ask us to delete them.

Messages you send through the contact form (and the e-mail address you give there) are stored so we can reply.

If you use the optional Translate control on a review, our server sends that public review text to a third-party translation service and shows the result. We do not host that service's terms on this site.

Cookies for sign-in and your language always stay on, so the site works. We count visits without a cookie. We store the path, the time and a hash of the IP address, not the IP address itself. Pages from the same hashed address within 30 minutes belong to one session. A Google ad may set an advertising cookie through its own window.

Account data, reviews and photos stay until you delete your content or ask us to remove it, or until we must keep it for security or legal reasons. Server logs are kept only as long as needed for operations and security. Application error records (path and exception details, not a marketing profile) are kept for debugging.

We do not sell personal data.

We do not hand over our user list for advertising.

We do not send newsletters without consent.

We may update this policy. The current text is always on this page.